Vulnerability of personal data of Kazakhstani citizens and the need to implement the European experience

Journal title RIVISTA DI STUDI SULLA SOSTENIBILITA'
Author/s Serik Zhetpissov, Nursulun Mussabekova, Gulnar Alibayeva, Olga Dubovitskay, Zhadyra Talipova
Publishing Year 2024 Issue 2024/2
Language English Pages 19 P. 305-323 File size 212 KB
DOI 10.3280/RISS2024-002017
DOI is like a bar code for intellectual property: to have more infomation click here

Below, you can see the article first page

If you want to buy this article in PDF format, you can do it, following the instructions to buy download credits

Article preview

FrancoAngeli is member of Publishers International Linking Association, Inc (PILA), a not-for-profit association which run the CrossRef service enabling links to and from online scholarly content.

The modern period of time is very painful for the privacy of an individual and the preservation of his personal data, as the rapid growth of digitalization and the in-troduction of information and communication technologies have threatened the confidentiality of information. The paradigm of attitude to information in general, and especially to personal data, which is perceived by modern society as a product for trade, is changing. And if earlier the confidentiality of personal information about a person was recognized as something absolute and unshakeable, today there are new views on the ways to evaluate personal data. Of course, this gives rise to the emergence in the sale of personal data not only by illegal means, but al-so the formation of specialized markets of personal information. Despite the ef-forts of the state to ensure legal regulation of digitalization processes, the desire to involve the process of information technology use in the legal field, it must be ad-mitted that the pace of legislation development does not keep pace with the rapid formation of an open information space. Consequently, the citizens of these coun-tries have many questions how to keep their personal data confidential, and the state has very few answers how to solve the emerging problems and fight against data leaks into the open space. The purpose of the article was decided to deter-mine the development of recommendations to improve the regulatory and legal framework of personal data protection in Kazakhstan.

Keywords: personal data, data privacy, personal information, privacy, protection of individual rights

  1. Adilet (2012). Strategy “Kazakhstan-2050”: a new political course of the established state. -- Retrieved from https://adilet.zan.kz/rus/docs/K1200002050.
  2. Adilet (2017). Resolution of the Government of the Republic of Kazakhstan No. 407. On Approval of the Cybersecurity Concept (“Cyber Shield of Kazakhstan”). -- Retrieved from https://adilet.zan.kz/rus/docs/P1700000407.
  3. Adilet (2021a). Decree of the President of the Republic of Kazakhstan No. 522 “On Approval of the Concept of Development of Public Administration in the Republic of Kazakhstan until 2030”. -- Retrieved from https://adilet.zan.kz/rus/docs/U2100000522.
  4. Adilet (2021b). Decree of the President of the Republic of Kazakhstan № 674 “On approval of the Concept of Legal Policy of the Republic of Kazakhstan until 2030”. -- Retrieved from https://adilet.zan.kz/rus/docs/U2100000674.
  5. Banisar D. (2019). National Comprehensive Data Protection/Privacy Laws and Bills. -- Retrieved from https://ssrn.com/abstract=1951416.
  6. Bénédicte B. (1999). Uses of electronic information: political science researchers and the Internet. (pp 107). Paris: Institute National Des Techniques De La Documentation.
  7. Bert-Jaap K. (2019). The trouble with European data protection law. International Data Privacy Law, 4(4): 250-261
  8. Bibent M. (2000). Information Processing Law. (pp 128). Paris: Armand Colin.
  9. Byrum K. (2017) The European right to be forgotten: A challenge to the United States Constitution’s First Amendment and to professional public relations ethics. Public Relations Review, 43(1): 102-111.
  10. Carolan E. (2016). The continuing problems with online consent under the EU’s emerging data protection principles. Computer Law & Security Review, 32(3): 462-473.
  11. Cyber Media (2023). Kazakhstan still cannot find the source of a major leak of personal data. -- Retrieved from https://securitymedia.org/news/v-kazakhstane-poka-ne-mogut-nayti-istochnik-krupnoy-utechki-personalnykh-dannykh.html.
  12. European Parliament (2016). On the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. -- Retrieved from https://ogdpr.eu/en/gdpr-2016-679.
  13. Forbes (2023). In 2023, fraudsters caused 96.5 billion tenge of damage to Kazakhstani citizens. -- Retrieved from https://forbes.kz/articles/v_2023_godu_moshenniki_nanesli_uscherb_na_summu_965_mlrd_tenge.
  14. Issakhankyzy A., Alibayeva G. A., Sabitova A. A., Zhetpisov S. K., & Shansharbayeva B. S. (2024). Legal mechanism for regulating responsibilities in the information sphere. International Journal of Electronic Security and Digital Forensics, 1: 14-27.
  15. Kapital.kz. (2022). CARCA says Kazpost data leaked. -- Retrieved from https://kapital.kz/tehnology/106342/v-tsarka-zayavili-ob-utechke-dannykh-kazpochty.html.
  16. Kapital.kz. (2023). Data of more than 260 thousand Kazakhstani citizens leaked online. -- Retrieved from https://kapital.kz/tehnology/112028/dannyye-boleye-260-tysyach-kazakhstantsev-utekli-v-set-kz-cert.html.
  17. Kubenov G. S., Zhetpisov K., Alibayeva G. A., Kolesnikov Y. Yu., & Kydralinova A. K., (2023). Protection of privacy in information technologies in the context of COVID-19: A comparative legal analysis of the Republic of Kazakhstan and the European Union. Rivista Di Studi Sulla Sostenibilità, 1: 63-89.
  18. Law of the Republic of Kazakhstan (2013). No. 94-V “On Personal Data and their Protection”. -- Retrieved from https://online.zakon.kz/Document/?doc_id=31396226&pos=3;-106#pos=3;-106.
  19. Lozovaya O. V. (2015). Legislation of the Republic of Kazakhstan in the field of personal data protection: comparative analysis with the law of the European Union. Bulletin of the Institute of Legislation and Legal Information of the Republic of Kazakhstan, 1(37): 128-132.
  20. Mangku D. G. S., Yuliartini Ni. P. R., I. Suastika N. I., & Wirawan G. M. A. S. (2021). The personal data protection of internet users in Indonesia. Journal of Southwest Jiaotong University, 56(1): 202-209.
  21. Marcinauskaitė R., Pukanasytė I., & Šukytė J. (2019). Cyber security issues: problematic aspects of hacking. Journal of Security and Sustainability, 8(3),
  22. Nugroho A. A., Winanti A., & Surahmad S. (2020). Personal data protection in Indonesia: Legal Perspective. International Journal of Multicultural and Multireligious Understanding, 7(7): 183-189.
  23. Phillips M. (2018). International data-sharing norms: from the OECD to the General Data Protection Regulation. Hum Genet, 137: 575-582
  24. Purtova N. (2018). The law of everything, broad concept of personal data and future of EU data protection law. Law, Innovation and Technology, 10(1): 40-81.
  25. Romansky R. (2022). Digital age and personal data protection. International Journal on Information Technologies & Security, 3(14): 89-106.
  26. Szekely I. (2016). From a Model Pupil to a Problematic Grown-Up: Enforcing Privacy and Data Protection in Hungary. In: Wright, D., De Hert, P. (eds.). Enforcing Privacy. Law, Governance and Technology Series, vol 25. Cham.: Springer, DOI: 10.1007/978-3-319-25047-2_4
  27. Trepte S. Teutsch D. Masur P. K., Eichler C. Fischer M., Hennhöfer A., & Lind F. (2015). Do People Know About Privacy and Data Protection Strategies? Towards the “Online Privacy Literacy Scale”. In: Gutwirth S., Leenes R., de Hert P. (eds.). Reforming European Data Protection Law. Law, Governance and Technology. Dordrecht: Springer.
  28. Vergallo G. M., Zaami S. & Marinelli E. (2021). The COVID-19 pandemic and contact tracing technologies, between upholding the right to health and personal data protection. European Review for Medical and Pharmacological Sciences, 25: 2449-2456.
  29. Yerbolatov Y. Ye., Zhetpisov S. K., Boretsky A. V., Alibayeva G. A., & Kolesnikov Y. Yu. (2022). Personal data protection in Kazakhstan and the EU: Comparative-legal analysis. Rivista Di Studi Sulla Sostenibilità, 1: 69-88.
  30. Zakon.kz (2024a). Personal data leakage: what the state is doing to protect citizens. -- Retrieved from https://www.zakon.kz/stati/6427128-utechka-personalnykh-dannykh-chto-gosudarstvo-predprinimaet-dlya-zashchity-grazhdan.html.
  31. Zakon.kz (2024b). Leakage of personal data of Kazakhstani citizens: the Ministry of Finance and the KNB initiated an audit. -- Retrieved from https://www.zakon.kz/obshestvo/6425025-utechka-personalnykh-dannykh-kazakhstantsev-mintsifry-i-knb-nachali-proverku.html.

Serik Zhetpissov, Nursulun Mussabekova, Gulnar Alibayeva, Olga Dubovitskay, Zhadyra Talipova, Vulnerability of personal data of Kazakhstani citizens and the need to implement the European experience in "RIVISTA DI STUDI SULLA SOSTENIBILITA'" 2/2024, pp 305-323, DOI: 10.3280/RISS2024-002017